CVE-2024-7267

HIGH Year: 2024
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-213
View all →

Vulnerability Description

Exposure of Sensitive Information vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to retrieve information about IP infrastructure and credentials. This issue affects EZD RP all versions before 19.6

Related Vulnerabilities

CVE-2022-22541

MEDIUM
CVSS:6.5(Medium)

SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is t...

CWE-2132022

CVE-2019-1010283

HIGH
CVSS:7.5(High)

Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure. The impact is: Loss of Confidentiality. The component is: func...

CWE-2132019

CVE-2022-30350

HIGH
CVSS:7.5(High)

Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure. The PDFEscape Online tool provides users with a "white out" functionality for redacting images, t...

CWE-2132022

CVE-2023-6517

HIGH
CVSS:7.5(High)

Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc. MİA-MED allows Collect Data as Provided by Users.This issue affects MİA-MED: before 1.0.7.

CWE-2132023

CVE-2017-3211

MEDIUM
CVSS:5.3(Medium)

Yopify, an e-commerce notification plugin, up to April 06, 2017, leaks the first name, last initial, city, and recent purchase data of customers, all without user authorization.

CWE-2132017

CVE-2019-10246

MEDIUM
CVSS:5.3(Medium)

In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it i...

CWE-2132019